ipnat filtering exception

This is a discussion on ipnat filtering exception within the IPFilter forums, part of the System Security and Security Related category; I am using the ipfilter built into FreeBSD 5.4 v3.4.35 (336). I just came across a need ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-03-2005
Billy Newsom
 
Posts: n/a
Default ipnat filtering exception

I am using the ipfilter built into FreeBSD 5.4 v3.4.35 (336). I just
came across a need to use a new redirect, but I don't see anything in
the Howto discussing it, which usually fixes me up.

I have this new rule:
rdr fxp0 0.0.0.0/0 port 25 -> 192.168.0.1 port 2525

This will allow all port 25 traffic starting from LAN to WAN to go to
port 2525 on a machine of my choice.

Exception 1.
Fine, but I need to make a few exceptions. For example, say I have a PC
at 192.168.5.5 that needs to be excepted. How do I keep this PC from
being redirected?

Illustration Exc1:
rdr fxp0 0.0.0.0/0 port 25 -> 192.168.0.1 port 2525, *UNLESS* source is
192.168.5.5


Exception 2.
Also, what if we contact a special server, which needs no redirection?
Say, server 192.168.0.1 port 25 traffic is legitimate, and everyone on
the LAN should receive *no* redirection for that special server?

Illustration Exc2:
*DONOT-rdr* fxp0 192.168.0.1 port 25 no matter what the source is.


Thanks,
Billy
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 10:19 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0